Legions of website visitors could be infected with drive-by malware, among other issues, thanks to a CSRF bug in Real-Time Search and Replace. A high-severity cross-site request forgery (CSRF) ...